The “AvosLocker” group is taking credit for the ransomware attack on Bluefield University and is demanding payment in the form of a ransom.
See also: Is misinformation the new malware?
There are new developments regarding the cybersecurity attack that has crippled internet services at Bluefield University. We learned through “RamAlert” messages sent to students, faculty, and staff that the cyberattackers are now communicating directly with everyone on the alert system. They have identified themselves as “AvosLocker” and are demanding payment in exchange for not leaking students’ personal data. The FBI considers AvosLocker to be ransomware. In March 2022, they issued an advisory about it, stating that AvosLocker has “targeted victims in multiple critical infrastructure sectors in the U.S., including financial services, critical manufacturing sectors, and government facilities.”
A “RamAlert” text sent just before noon Monday said that AvosLocker had “compromised the university network to leak 1.2 terabytes of files.” The text also claimed that they had admissions data from thousands of students that could be leaked to “a dark web blog.” They also said that they would “continue the attack if the BU president does not pay,” though they did not say in the text how much money they were asking for.
See also: Hacking group ScarCruft spreads RokRAT malware
Bluefield University issued a statement earlier today stating: “As you are aware, on Sunday, April 30, 2023, we discovered a cybersecurity attack that impacted our systems. Upon learning of this issue, we immediately engaged independent third-party cybersecurity experts to assist us in reviewing and remediating our efforts – however, it may take several days for full functionality to be restored. We are conducting an investigation to determine the nature and scope of the incident – however, at this time, we have no evidence to suggest that the information involved was used for financial fraud or identity theft.”
We spoke by phone with two students who wished to remain anonymous. While they expressed concern about the leak of their personal information, they were also optimistic about the university's response.
See also: US Marshals Service still recovering from February ransomware attack
Bluefield University states that the myBU and Canvas websites are safe to use, meaning final exams can be taken. These final exams have been postponed one day from their originally scheduled time.
Information source: wvva.com
